@blen/fedreg-mcp-server 2.0.0

package/dist/auth/embedded.d.ts

@@ -0,0 +1,2 @@
+export declare function mintDevToken(secret: string, subject: string, audience: string, ttlSec?: number): Promise<string>;
+//# sourceMappingURL=embedded.d.ts.map

package/dist/auth/embedded.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"embedded.d.ts","sourceRoot":"","sources":["../../src/auth/embedded.ts"],"names":[],"mappings":"AAMA,wBAAsB,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,SAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAUpH"}

package/dist/auth/embedded.js

@@ -0,0 +1,17 @@
+/**
+ * Embedded auth: a dev-only HS256 issuer for local testing.
+ * Do not use in production.
+ */
+import { SignJWT } from 'jose';
+export async function mintDevToken(secret, subject, audience, ttlSec = 3600) {
+    const key = new TextEncoder().encode(secret);
+    return await new SignJWT({})
+        .setProtectedHeader({ alg: 'HS256' })
+        .setIssuer('fedreg-mcp-server/embedded')
+        .setSubject(subject)
+        .setAudience(audience)
+        .setIssuedAt()
+        .setExpirationTime(Math.floor(Date.now() / 1000) + ttlSec)
+        .sign(key);
+}
+//# sourceMappingURL=embedded.js.map

package/dist/auth/embedded.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"embedded.js","sourceRoot":"","sources":["../../src/auth/embedded.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAE/B,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,MAAc,EAAE,OAAe,EAAE,QAAgB,EAAE,MAAM,GAAG,IAAI;IACjG,MAAM,GAAG,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC7C,OAAO,MAAM,IAAI,OAAO,CAAC,EAAE,CAAC;SACzB,kBAAkB,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;SACpC,SAAS,CAAC,4BAA4B,CAAC;SACvC,UAAU,CAAC,OAAO,CAAC;SACnB,WAAW,CAAC,QAAQ,CAAC;SACrB,WAAW,EAAE;SACb,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,MAAM,CAAC;SACzD,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC"}

package/dist/auth/index.d.ts

@@ -0,0 +1,2 @@
+export { buildVerifier, type AuthConfig, type AuthContext, type Verifier } from '../server/authz.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/auth/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/auth/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,KAAK,UAAU,EAAE,KAAK,WAAW,EAAE,KAAK,QAAQ,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/auth/index.js

@@ -0,0 +1,2 @@
+export { buildVerifier } from '../server/authz.js';
+//# sourceMappingURL=index.js.map

package/dist/auth/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/auth/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAoD,MAAM,oBAAoB,CAAC"}

package/dist/bin.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=bin.d.ts.map

package/dist/bin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bin.d.ts","sourceRoot":"","sources":["../src/bin.ts"],"names":[],"mappings":""}

package/dist/bin.js

@@ -0,0 +1,120 @@
+#!/usr/bin/env node
+import { startStdio } from './server/stdio.js';
+import { startHttp } from './server/http.js';
+import { buildSupervisor } from './supervisor/index.js';
+import { log } from './util/logger.js';
+function parseArgs(argv) {
+    const args = {
+        http: false,
+        port: Number(process.env.PORT ?? 8080),
+        host: process.env.HOST ?? '0.0.0.0',
+        sandbox: process.env.FEDREG_SANDBOX ?? 'auto',
+        insecure: false,
+    };
+    for (let i = 0; i < argv.length; i++) {
+        const a = argv[i];
+        if (a === '--http')
+            args.http = true;
+        else if (a === '--insecure')
+            args.insecure = true;
+        else if (a === '--port')
+            args.port = Number(argv[++i]);
+        else if (a === '--host')
+            args.host = String(argv[++i]);
+        else if (a === '--sandbox')
+            args.sandbox = argv[++i];
+        else if (a === '--help' || a === '-h') {
+            printHelp();
+            process.exit(0);
+        }
+    }
+    return args;
+}
+function printHelp() {
+    process.stdout.write(`fedreg-mcp-server [options]
+
+  --http                 Run Streamable HTTP transport (default: stdio)
+  --port N               HTTP port (default 8080, env PORT)
+  --host H               HTTP bind host (default 0.0.0.0, env HOST)
+  --sandbox auto|isolate|deno
+                         Sandbox runner (default auto, env FEDREG_SANDBOX)
+  --insecure             HTTP without auth (DEV ONLY)
+  -h, --help             Show this help
+`);
+}
+async function main() {
+    const args = parseArgs(process.argv.slice(2));
+    const deps = await buildSupervisor({
+        frBaseUrl: process.env.FEDREG_FR_BASE_URL ?? 'https://www.federalregister.gov/api/v1',
+        ecfrBaseUrl: process.env.FEDREG_ECFR_BASE_URL ?? 'https://www.ecfr.gov/api',
+        regsBaseUrl: process.env.FEDREG_REGS_BASE_URL ?? 'https://api.regulations.gov',
+        regsApiKey: process.env.FEDREG_REGS_API_KEY,
+        userAgent: process.env.FEDREG_USER_AGENT ?? 'fedreg-mcp-server/2.0 (+https://github.com/blen-labs/fedreg-mcp-server)',
+        upstreamTimeoutMs: Number(process.env.FEDREG_UPSTREAM_TIMEOUT_MS ?? 20_000),
+        upstreamRetries: Number(process.env.FEDREG_UPSTREAM_RETRIES ?? 3),
+        cacheTtlMs: Number(process.env.FEDREG_CACHE_TTL_MS ?? 300_000),
+        cacheMaxItems: Number(process.env.FEDREG_CACHE_MAX_ITEMS ?? 2000),
+        sandbox: args.sandbox,
+        regsMaxCallsPerExecute: (() => {
+            const n = Number(process.env.FEDREG_REGS_MAX_CALLS_PER_EXECUTE ?? 30);
+            return Number.isFinite(n) && n >= 0 ? n : 30;
+        })(),
+        regsRatePerHour: (() => {
+            // Require >= 1: a rate of 0 would silently block ALL regs calls (it is NOT
+            // "unlimited"). To disable regs, leave FEDREG_REGS_API_KEY unset instead.
+            const n = Number(process.env.FEDREG_REGS_RATE_PER_HOUR ?? 1000);
+            return Number.isFinite(n) && n >= 1 ? n : 1000;
+        })(),
+        regsSubjectRatePerHour: (() => {
+            // Require >= 1; per-subject hourly cap, not "unlimited".
+            const n = Number(process.env.FEDREG_REGS_SUBJECT_RATE_PER_HOUR ?? 500);
+            return Number.isFinite(n) && n >= 1 ? n : 500;
+        })(),
+    });
+    let handle;
+    if (args.http) {
+        const allowedHosts = process.env.FEDREG_ALLOWED_HOSTS
+            ? process.env.FEDREG_ALLOWED_HOSTS.split(',').map(s => s.trim().toLowerCase()).filter(Boolean)
+            : undefined;
+        handle = await startHttp(deps, {
+            port: args.port,
+            host: args.host,
+            rps: Number(process.env.FEDREG_IP_RPS ?? 5),
+            burst: Number(process.env.FEDREG_IP_BURST ?? 20),
+            subjectDailyQuota: Number(process.env.FEDREG_SUBJECT_DAILY_QUOTA ?? 10_000),
+            insecure: args.insecure,
+            allowedHosts,
+            publicOrigin: process.env.FEDREG_PUBLIC_ORIGIN,
+            auth: {
+                provider: process.env.FEDREG_AUTH_PROVIDER ?? 'none',
+                issuer: process.env.FEDREG_AUTH_ISSUER,
+                audience: process.env.FEDREG_AUTH_AUDIENCE,
+                jwksUrl: process.env.FEDREG_AUTH_JWKS_URL,
+                resource: process.env.FEDREG_AUTH_RESOURCE,
+                scopes: process.env.FEDREG_AUTH_SCOPES?.split(',').map(s => s.trim()).filter(Boolean),
+            },
+        });
+    }
+    else {
+        await startStdio(deps);
+    }
+    // Graceful shutdown (Railway sends SIGTERM, K8s sends SIGTERM, Ctrl-C sends SIGINT)
+    const shutdown = async (signal) => {
+        log.info('shutdown.start', { signal });
+        try {
+            if (handle)
+                await handle.close();
+        }
+        catch (err) {
+            log.warn('shutdown.error', { message: err.message });
+        }
+        process.exit(0);
+    };
+    process.on('SIGTERM', () => void shutdown('SIGTERM'));
+    process.on('SIGINT', () => void shutdown('SIGINT'));
+}
+main().catch(err => {
+    log.error('bin.fatal', { message: err.message, stack: err.stack });
+    process.exit(1);
+});
+//# sourceMappingURL=bin.js.map

package/dist/bin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bin.js","sourceRoot":"","sources":["../src/bin.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAmB,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAExD,OAAO,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAC;AAUvC,SAAS,SAAS,CAAC,IAAc;IAC/B,MAAM,IAAI,GAAY;QACpB,IAAI,EAAE,KAAK;QACX,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,IAAI,CAAC;QACtC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,SAAS;QACnC,OAAO,EAAG,OAAO,CAAC,GAAG,CAAC,cAA0C,IAAI,MAAM;QAC1E,QAAQ,EAAE,KAAK;KAChB,CAAC;IACF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,IAAI,CAAC,KAAK,QAAQ;YAAE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;aAChC,IAAI,CAAC,KAAK,YAAY;YAAE,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;aAC7C,IAAI,CAAC,KAAK,QAAQ;YAAE,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;aAClD,IAAI,CAAC,KAAK,QAAQ;YAAE,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;aAClD,IAAI,CAAC,KAAK,WAAW;YAAE,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,EAAE,CAAC,CAAgB,CAAC;aAC/D,IAAI,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;YACtC,SAAS,EAAE,CAAC;YACZ,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,SAAS;IAChB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC;;;;;;;;;CAStB,CAAC,CAAC;AACH,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAE9C,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC;QACjC,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,wCAAwC;QACrF,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,0BAA0B;QAC3E,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,6BAA6B;QAC9E,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB;QAC3C,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,yEAAyE;QACrH,iBAAiB,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,0BAA0B,IAAI,MAAM,CAAC;QAC3E,eAAe,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB,IAAI,CAAC,CAAC;QACjE,UAAU,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,OAAO,CAAC;QAC9D,aAAa,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,IAAI,IAAI,CAAC;QACjE,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,sBAAsB,EAAE,CAAC,GAAG,EAAE;YAC5B,MAAM,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,iCAAiC,IAAI,EAAE,CAAC,CAAC;YACtE,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,CAAC,CAAC,EAAE;QACJ,eAAe,EAAE,CAAC,GAAG,EAAE;YACrB,2EAA2E;YAC3E,0EAA0E;YAC1E,MAAM,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAyB,IAAI,IAAI,CAAC,CAAC;YAChE,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACjD,CAAC,CAAC,EAAE;QACJ,sBAAsB,EAAE,CAAC,GAAG,EAAE;YAC5B,yDAAyD;YACzD,MAAM,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,iCAAiC,IAAI,GAAG,CAAC,CAAC;YACvE,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QAChD,CAAC,CAAC,EAAE;KACL,CAAC,CAAC;IAEH,IAAI,MAA8B,CAAC;IAEnC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB;YACnD,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;YAC9F,CAAC,CAAC,SAAS,CAAC;QAEd,MAAM,GAAG,MAAM,SAAS,CAAC,IAAI,EAAE;YAC7B,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,GAAG,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,CAAC,CAAC;YAC3C,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,EAAE,CAAC;YAChD,iBAAiB,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,0BAA0B,IAAI,MAAM,CAAC;YAC3E,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,YAAY;YACZ,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,oBAAoB;YAC9C,IAAI,EAAE;gBACJ,QAAQ,EAAG,OAAO,CAAC,GAAG,CAAC,oBAA2C,IAAI,MAAM;gBAC5E,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB;gBACtC,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,oBAAoB;gBAC1C,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,oBAAoB;gBACzC,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,oBAAoB;gBAC1C,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;aACtF;SACF,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC;IAED,oFAAoF;IACpF,MAAM,QAAQ,GAAG,KAAK,EAAE,MAAc,EAAE,EAAE;QACxC,GAAG,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QACvC,IAAI,CAAC;YACH,IAAI,MAAM;gBAAE,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACnC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,OAAO,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QAClE,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC;IACF,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,KAAK,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;IACtD,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;AACtD,CAAC;AAID,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE;IACjB,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,OAAO,EAAG,GAAa,CAAC,OAAO,EAAE,KAAK,EAAG,GAAa,CAAC,KAAK,EAAE,CAAC,CAAC;IACzF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,11 @@
+export { buildMcpServer } from './server/mcpServer.js';
+export { startStdio } from './server/stdio.js';
+export { startHttp } from './server/http.js';
+export { buildSupervisor } from './supervisor/index.js';
+export { buildSdk } from './sdk/bindings.js';
+export { pickSandbox } from './sandbox/index.js';
+export { buildVerifier } from './server/authz.js';
+export type { Sdk } from './sdk/bindings.js';
+export type { SandboxKind, SandboxRunner, ExecuteOptions, ExecuteResult } from './sandbox/types.js';
+export type { AuthConfig, AuthContext, Verifier } from './server/authz.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,YAAY,EAAE,GAAG,EAAE,MAAM,mBAAmB,CAAC;AAC7C,YAAY,EAAE,WAAW,EAAE,aAAa,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACpG,YAAY,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC"}

package/dist/index.js

@@ -0,0 +1,8 @@
+export { buildMcpServer } from './server/mcpServer.js';
+export { startStdio } from './server/stdio.js';
+export { startHttp } from './server/http.js';
+export { buildSupervisor } from './supervisor/index.js';
+export { buildSdk } from './sdk/bindings.js';
+export { pickSandbox } from './sandbox/index.js';
+export { buildVerifier } from './server/authz.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC"}

package/dist/sandbox/deno.d.ts

@@ -0,0 +1,13 @@
+import type { ExecuteOptions, ExecuteResult, RpcBridge, SandboxRunner } from './types.js';
+/**
+ * Deno fallback sandbox. We launch `deno run --no-prompt <runner>` with NO
+ * `--allow-*` flags, so Deno's deny-by-default grants no net/fs/env/ffi/subprocess
+ * access, and bridge RPC over stdin/stdout using a length-prefixed JSON protocol.
+ */
+export declare class DenoRunner implements SandboxRunner {
+    kind: "deno";
+    available(): Promise<boolean>;
+    execute(opts: ExecuteOptions, rpc: RpcBridge): Promise<ExecuteResult>;
+}
+export declare function buildDenoRunner(userCode: string, timeoutMs: number, bindings: string[]): string;
+//# sourceMappingURL=deno.d.ts.map

package/dist/sandbox/deno.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deno.d.ts","sourceRoot":"","sources":["../../src/sandbox/deno.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAG1F;;;;GAIG;AACH,qBAAa,UAAW,YAAW,aAAa;IAC9C,IAAI,EAAG,MAAM,CAAU;IAEjB,SAAS,IAAI,OAAO,CAAC,OAAO,CAAC;IAQ7B,OAAO,CAAC,IAAI,EAAE,cAAc,EAAE,GAAG,EAAE,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC;CAwF5E;AAWD,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,MAAM,CAgF/F"}

package/dist/sandbox/deno.js

@@ -0,0 +1,203 @@
+import { spawn } from 'node:child_process';
+import { mkdtempSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { preflight } from './policy.js';
+/**
+ * Deno fallback sandbox. We launch `deno run --no-prompt <runner>` with NO
+ * `--allow-*` flags, so Deno's deny-by-default grants no net/fs/env/ffi/subprocess
+ * access, and bridge RPC over stdin/stdout using a length-prefixed JSON protocol.
+ */
+export class DenoRunner {
+    kind = 'deno';
+    async available() {
+        return await new Promise(resolve => {
+            const p = spawn('deno', ['--version'], { stdio: 'ignore' });
+            p.on('error', () => resolve(false));
+            p.on('exit', code => resolve(code === 0));
+        });
+    }
+    async execute(opts, rpc) {
+        const started = Date.now();
+        const policy = preflight(opts.code);
+        if (!policy.ok) {
+            return { ok: false, logs: [], error: { name: 'PolicyError', message: policy.errors.join('; ') }, durationMs: Date.now() - started };
+        }
+        const runner = buildDenoRunner(opts.code, opts.timeoutMs ?? 15_000, opts.bindings ?? []);
+        // Write the runner to a temp file rather than piping it on stdin: `deno run -`
+        // reads the program from stdin until EOF, but we keep stdin open as the RPC
+        // channel, so it would never start. A file path leaves stdin free for RPC.
+        const tmpDir = mkdtempSync(join(tmpdir(), 'fedreg-deno-'));
+        const runnerPath = join(tmpDir, 'runner.ts');
+        writeFileSync(runnerPath, runner);
+        const cleanup = () => { try {
+            rmSync(tmpDir, { recursive: true, force: true });
+        }
+        catch { /* ignore */ } };
+        const child = spawn('deno', [
+            'run',
+            '--no-prompt',
+            runnerPath,
+        ], { stdio: ['pipe', 'pipe', 'pipe'] });
+        const logs = [];
+        let stdoutBuf = Buffer.alloc(0);
+        return await new Promise((resolve) => {
+            const timeout = setTimeout(() => {
+                try {
+                    child.kill('SIGKILL');
+                }
+                catch { /* ignore */ }
+                cleanup();
+                resolve({
+                    ok: false, logs,
+                    error: { name: 'TimeoutError', message: `Execution exceeded ${opts.timeoutMs ?? 15_000}ms` },
+                    durationMs: Date.now() - started,
+                });
+            }, (opts.timeoutMs ?? 15_000) + 1_000);
+            child.stdout.on('data', async (chunk) => {
+                stdoutBuf = Buffer.concat([stdoutBuf, chunk]);
+                // length-prefixed JSON frames: 8-byte ascii hex length + payload
+                while (stdoutBuf.length >= 9) {
+                    const lenHex = stdoutBuf.subarray(0, 8).toString('ascii');
+                    if (stdoutBuf[8] !== 0x0a) {
+                        logs.push(stdoutBuf.toString('utf8'));
+                        stdoutBuf = Buffer.alloc(0);
+                        break;
+                    }
+                    const len = parseInt(lenHex, 16);
+                    if (Number.isNaN(len))
+                        break;
+                    if (stdoutBuf.length < 9 + len)
+                        break;
+                    const payload = stdoutBuf.subarray(9, 9 + len).toString('utf8');
+                    stdoutBuf = stdoutBuf.subarray(9 + len);
+                    const msg = JSON.parse(payload);
+                    if (msg.kind === 'log') {
+                        logs.push(msg.text);
+                    }
+                    else if (msg.kind === 'rpc') {
+                        const res = await rpc.dispatch({ binding: msg.binding, path: msg.path, args: msg.args });
+                        writeFrame(child.stdin, { kind: 'rpc-result', id: msg.id, ok: res.ok, value: res.value, error: res.error });
+                    }
+                    else if (msg.kind === 'result') {
+                        clearTimeout(timeout);
+                        try {
+                            child.stdin.end();
+                        }
+                        catch { /* ignore */ }
+                        resolve({
+                            ok: msg.ok,
+                            logs,
+                            value: msg.value,
+                            error: msg.error,
+                            durationMs: Date.now() - started,
+                        });
+                    }
+                }
+            });
+            child.stderr.on('data', (b) => logs.push(b.toString('utf8')));
+            child.on('error', err => {
+                clearTimeout(timeout);
+                cleanup();
+                resolve({ ok: false, logs, error: { name: 'SpawnError', message: err.message }, durationMs: Date.now() - started });
+            });
+            child.on('exit', code => {
+                cleanup();
+                if (code !== 0 && code !== null) {
+                    clearTimeout(timeout);
+                    resolve({ ok: false, logs, error: { name: 'ExitError', message: `deno exited with ${code}` }, durationMs: Date.now() - started });
+                }
+            });
+        });
+    }
+}
+function writeFrame(stream, obj) {
+    const payload = JSON.stringify(obj);
+    const len = Buffer.byteLength(payload, 'utf8').toString(16).padStart(8, '0');
+    stream.write(len + '\n' + payload);
+}
+// `bindings` is interpolated into the generated source via JSON.stringify; it is safe
+// only because names are pre-validated as JS identifiers by getSources()
+// (src/sdk/sources/index.ts). Do NOT pass unvalidated strings here.
+export function buildDenoRunner(userCode, timeoutMs, bindings) {
+    // Runs inside deno. Talks to host over stdin/stdout with the same framing.
+    return `
+const enc = new TextEncoder();
+const dec = new TextDecoder();
+
+function writeFrame(obj) {
+  const s = JSON.stringify(obj);
+  const len = (new TextEncoder().encode(s)).byteLength.toString(16).padStart(8, '0');
+  Deno.stdout.writeSync(enc.encode(len + '\\n' + s));
+}
+
+let inbuf = new Uint8Array(0);
+const pending = new Map();
+let nextId = 1;
+
+async function readLoop() {
+  const reader = Deno.stdin.readable.getReader();
+  while (true) {
+    const { value, done } = await reader.read();
+    if (done) return;
+    const merged = new Uint8Array(inbuf.length + value.length);
+    merged.set(inbuf); merged.set(value, inbuf.length);
+    inbuf = merged;
+    while (inbuf.length >= 9) {
+      const lenHex = dec.decode(inbuf.subarray(0, 8));
+      const len = parseInt(lenHex, 16);
+      if (isNaN(len)) { inbuf = new Uint8Array(0); break; }
+      if (inbuf.length < 9 + len) break;
+      const payload = dec.decode(inbuf.subarray(9, 9 + len));
+      inbuf = inbuf.subarray(9 + len);
+      const msg = JSON.parse(payload);
+      if (msg.kind === 'rpc-result') {
+        const cb = pending.get(msg.id);
+        if (cb) { pending.delete(msg.id); cb(msg); }
+      }
+    }
+  }
+}
+readLoop();
+
+function call(binding, path, args) {
+  return new Promise((resolve, reject) => {
+    const id = nextId++;
+    pending.set(id, (r) => {
+      if (!r.ok) { const e = new Error(r.error.message); e.name = r.error.name; reject(e); }
+      else resolve(r.value);
+    });
+    writeFrame({ kind: 'rpc', id, binding, path, args });
+  });
+}
+
+function makeProxy(binding) {
+  const handler = (path) => new Proxy(function(){}, {
+    get(_, key) { return handler([...path, String(key)]); },
+    apply(_, __, args) { return call(binding, path, args); },
+  });
+  return handler([]);
+}
+
+const __bindings = ${JSON.stringify(bindings)};
+for (const name of __bindings) { globalThis[name] = makeProxy(name); }
+
+const origLog = console.log;
+console.log = (...a) => writeFrame({ kind: 'log', text: a.map(String).join(' ') });
+console.info = console.log; console.warn = console.log; console.error = console.log;
+
+const userFn = async () => {
+${userCode}
+};
+
+const timer = setTimeout(() => {
+  writeFrame({ kind: 'result', ok: false, error: { name: 'TimeoutError', message: 'Execution exceeded ${timeoutMs}ms' }});
+  Deno.exit(0);
+}, ${timeoutMs});
+
+userFn()
+  .then(value => { clearTimeout(timer); writeFrame({ kind: 'result', ok: true, value }); Deno.exit(0); })
+  .catch(err => { clearTimeout(timer); writeFrame({ kind: 'result', ok: false, error: { name: err.name || 'Error', message: err.message || String(err) }}); Deno.exit(0); });
+`;
+}
+//# sourceMappingURL=deno.js.map

package/dist/sandbox/deno.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deno.js","sourceRoot":"","sources":["../../src/sandbox/deno.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7D,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAExC;;;;GAIG;AACH,MAAM,OAAO,UAAU;IACrB,IAAI,GAAG,MAAe,CAAC;IAEvB,KAAK,CAAC,SAAS;QACb,OAAO,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE;YACjC,MAAM,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC5D,CAAC,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;YACpC,CAAC,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC;QAC5C,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,IAAoB,EAAE,GAAc;QAChD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC;QACtI,CAAC;QAED,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,IAAI,MAAM,EAAE,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;QACzF,+EAA+E;QAC/E,4EAA4E;QAC5E,2EAA2E;QAC3E,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,cAAc,CAAC,CAAC,CAAC;QAC3D,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QAC7C,aAAa,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QAClC,MAAM,OAAO,GAAG,GAAS,EAAE,GAAG,IAAI,CAAC;YAAC,MAAM,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;QACjH,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE;YAC1B,KAAK;YACL,aAAa;YACb,UAAU;SACX,EAAE,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QAExC,MAAM,IAAI,GAAa,EAAE,CAAC;QAC1B,IAAI,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAEhC,OAAO,MAAM,IAAI,OAAO,CAAgB,CAAC,OAAO,EAAE,EAAE;YAClD,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC9B,IAAI,CAAC;oBAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;gBACrD,OAAO,EAAE,CAAC;gBACV,OAAO,CAAC;oBACN,EAAE,EAAE,KAAK,EAAE,IAAI;oBACf,KAAK,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,sBAAsB,IAAI,CAAC,SAAS,IAAI,MAAM,IAAI,EAAE;oBAC5F,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;iBACjC,CAAC,CAAC;YACL,CAAC,EAAE,CAAC,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC;YAEvC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,KAAa,EAAE,EAAE;gBAC9C,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC;gBAC9C,iEAAiE;gBACjE,OAAO,SAAS,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;oBAC7B,MAAM,MAAM,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;oBAC1D,IAAI,SAAS,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;wBAC1B,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;wBACtC,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;wBAC5B,MAAM;oBACR,CAAC;oBACD,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;oBACjC,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC;wBAAE,MAAM;oBAC7B,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,GAAG,GAAG;wBAAE,MAAM;oBACtC,MAAM,OAAO,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;oBAChE,SAAS,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC;oBACxC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAGiE,CAAC;oBAChG,IAAI,GAAG,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;wBACvB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;oBACtB,CAAC;yBAAM,IAAI,GAAG,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;wBAC9B,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;wBACzF,UAAU,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;oBAC9G,CAAC;yBAAM,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;wBACjC,YAAY,CAAC,OAAO,CAAC,CAAC;wBACtB,IAAI,CAAC;4BAAC,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;wBAAC,CAAC;wBAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;wBACjD,OAAO,CAAC;4BACN,EAAE,EAAE,GAAG,CAAC,EAAE;4BACV,IAAI;4BACJ,KAAK,EAAE,GAAG,CAAC,KAAK;4BAChB,KAAK,EAAE,GAAG,CAAC,KAAK;4BAChB,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;yBACjC,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACtE,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE;gBACtB,YAAY,CAAC,OAAO,CAAC,CAAC;gBACtB,OAAO,EAAE,CAAC;gBACV,OAAO,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;YACtH,CAAC,CAAC,CAAC;YACH,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE;gBACtB,OAAO,EAAE,CAAC;gBACV,IAAI,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;oBAChC,YAAY,CAAC,OAAO,CAAC,CAAC;oBACtB,OAAO,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,oBAAoB,IAAI,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;gBACpI,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;CACF;AAED,SAAS,UAAU,CAAC,MAA6B,EAAE,GAAY;IAC7D,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACpC,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC7E,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,GAAG,OAAO,CAAC,CAAC;AACrC,CAAC;AAED,sFAAsF;AACtF,yEAAyE;AACzE,oEAAoE;AACpE,MAAM,UAAU,eAAe,CAAC,QAAgB,EAAE,SAAiB,EAAE,QAAkB;IACrF,2EAA2E;IAC3E,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;qBA0DY,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC;;;;;;;;EAQ3C,QAAQ;;;;wGAI8F,SAAS;;KAE5G,SAAS;;;;;CAKb,CAAC;AACF,CAAC"}

package/dist/sandbox/index.d.ts

@@ -0,0 +1,20 @@
+import type { ExecuteOptions, ExecuteResult, RpcBridge, SandboxKind, SandboxRunner } from './types.js';
+import { IsolateRunner } from './isolate.js';
+import { DenoRunner } from './deno.js';
+export { IsolateRunner, DenoRunner };
+export type { SandboxKind, SandboxRunner } from './types.js';
+export type { ExecuteOptions, ExecuteResult, RpcBridge, RpcCall } from './types.js';
+/**
+ * Placeholder runner that returns a clear error when `execute` is invoked.
+ * Keeps `search_api` and `describe_schema` functional in environments where
+ * neither `isolated-vm` nor `deno` is available.
+ */
+export declare class UnavailableRunner implements SandboxRunner {
+    private readonly reason;
+    kind: "unavailable";
+    constructor(reason: string);
+    available(): Promise<boolean>;
+    execute(_opts: ExecuteOptions, _rpc: RpcBridge): Promise<ExecuteResult>;
+}
+export declare function pickSandbox(preferred: SandboxKind): Promise<SandboxRunner>;
+//# sourceMappingURL=index.d.ts.map

package/dist/sandbox/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/sandbox/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,SAAS,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AACvG,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAEvC,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,CAAC;AACrC,YAAY,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC7D,YAAY,EAAE,cAAc,EAAE,aAAa,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAEpF;;;;GAIG;AACH,qBAAa,iBAAkB,YAAW,aAAa;IAEzC,OAAO,CAAC,QAAQ,CAAC,MAAM;IADnC,IAAI,EAAG,aAAa,CAAU;gBACD,MAAM,EAAE,MAAM;IACrC,SAAS,IAAI,OAAO,CAAC,OAAO,CAAC;IAC7B,OAAO,CAAC,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC;CAQ9E;AAED,wBAAsB,WAAW,CAAC,SAAS,EAAE,WAAW,GAAG,OAAO,CAAC,aAAa,CAAC,CAgBhF"}

package/dist/sandbox/index.js

@@ -0,0 +1,46 @@
+import { IsolateRunner } from './isolate.js';
+import { DenoRunner } from './deno.js';
+export { IsolateRunner, DenoRunner };
+/**
+ * Placeholder runner that returns a clear error when `execute` is invoked.
+ * Keeps `search_api` and `describe_schema` functional in environments where
+ * neither `isolated-vm` nor `deno` is available.
+ */
+export class UnavailableRunner {
+    reason;
+    kind = 'unavailable';
+    constructor(reason) {
+        this.reason = reason;
+    }
+    async available() { return false; }
+    async execute(_opts, _rpc) {
+        return {
+            ok: false,
+            logs: [],
+            error: { name: 'SandboxUnavailable', message: this.reason },
+            durationMs: 0,
+        };
+    }
+}
+export async function pickSandbox(preferred) {
+    if (preferred === 'isolate') {
+        const r = new IsolateRunner();
+        if (await r.available())
+            return r;
+        return new UnavailableRunner('isolated-vm is not installed on this platform; install it or run with --sandbox deno');
+    }
+    if (preferred === 'deno') {
+        const r = new DenoRunner();
+        if (await r.available())
+            return r;
+        return new UnavailableRunner('Deno is not available on PATH; install Deno or run with --sandbox isolate');
+    }
+    const iso = new IsolateRunner();
+    if (await iso.available())
+        return iso;
+    const deno = new DenoRunner();
+    if (await deno.available())
+        return deno;
+    return new UnavailableRunner('No sandbox runner available. Install isolated-vm or Deno to use the `execute` tool. search_api and describe_schema still work.');
+}
+//# sourceMappingURL=index.js.map

package/dist/sandbox/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/sandbox/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAEvC,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,CAAC;AAIrC;;;;GAIG;AACH,MAAM,OAAO,iBAAiB;IAEC;IAD7B,IAAI,GAAG,aAAsB,CAAC;IAC9B,YAA6B,MAAc;QAAd,WAAM,GAAN,MAAM,CAAQ;IAAG,CAAC;IAC/C,KAAK,CAAC,SAAS,KAAuB,OAAO,KAAK,CAAC,CAAC,CAAC;IACrD,KAAK,CAAC,OAAO,CAAC,KAAqB,EAAE,IAAe;QAClD,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,EAAE;YACR,KAAK,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE,OAAO,EAAE,IAAI,CAAC,MAAM,EAAE;YAC3D,UAAU,EAAE,CAAC;SACd,CAAC;IACJ,CAAC;CACF;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,SAAsB;IACtD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,MAAM,CAAC,GAAG,IAAI,aAAa,EAAE,CAAC;QAC9B,IAAI,MAAM,CAAC,CAAC,SAAS,EAAE;YAAE,OAAO,CAAC,CAAC;QAClC,OAAO,IAAI,iBAAiB,CAAC,sFAAsF,CAAC,CAAC;IACvH,CAAC;IACD,IAAI,SAAS,KAAK,MAAM,EAAE,CAAC;QACzB,MAAM,CAAC,GAAG,IAAI,UAAU,EAAE,CAAC;QAC3B,IAAI,MAAM,CAAC,CAAC,SAAS,EAAE;YAAE,OAAO,CAAC,CAAC;QAClC,OAAO,IAAI,iBAAiB,CAAC,2EAA2E,CAAC,CAAC;IAC5G,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,aAAa,EAAE,CAAC;IAChC,IAAI,MAAM,GAAG,CAAC,SAAS,EAAE;QAAE,OAAO,GAAG,CAAC;IACtC,MAAM,IAAI,GAAG,IAAI,UAAU,EAAE,CAAC;IAC9B,IAAI,MAAM,IAAI,CAAC,SAAS,EAAE;QAAE,OAAO,IAAI,CAAC;IACxC,OAAO,IAAI,iBAAiB,CAAC,gIAAgI,CAAC,CAAC;AACjK,CAAC"}

package/dist/sandbox/isolate.d.ts

@@ -0,0 +1,7 @@
+import type { ExecuteOptions, ExecuteResult, RpcBridge, SandboxRunner } from './types.js';
+export declare class IsolateRunner implements SandboxRunner {
+    kind: "isolate";
+    available(): Promise<boolean>;
+    execute(opts: ExecuteOptions, rpc: RpcBridge): Promise<ExecuteResult>;
+}
+//# sourceMappingURL=isolate.d.ts.map

package/dist/sandbox/isolate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"isolate.d.ts","sourceRoot":"","sources":["../../src/sandbox/isolate.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAoB1F,qBAAa,aAAc,YAAW,aAAa;IACjD,IAAI,EAAG,SAAS,CAAU;IAEpB,SAAS,IAAI,OAAO,CAAC,OAAO,CAAC;IAY7B,OAAO,CAAC,IAAI,EAAE,cAAc,EAAE,GAAG,EAAE,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC;CAoF5E"}

package/dist/sandbox/isolate.js

@@ -0,0 +1,100 @@
+import { preflight } from './policy.js';
+async function loadIvm() {
+    const mod = await import('isolated-vm');
+    const candidate = (typeof mod.Isolate === 'function' ? mod : mod.default ?? {});
+    if (typeof candidate.Isolate !== 'function')
+        throw new Error('isolated-vm native binding unavailable');
+    return candidate;
+}
+export class IsolateRunner {
+    kind = 'isolate';
+    async available() {
+        try {
+            const ivm = await loadIvm();
+            // Confirm the native binding actually loaded by exercising it.
+            const iso = new ivm.Isolate({ memoryLimit: 16 });
+            iso.dispose();
+            return true;
+        }
+        catch {
+            return false;
+        }
+    }
+    async execute(opts, rpc) {
+        const started = Date.now();
+        const policy = preflight(opts.code);
+        if (!policy.ok) {
+            return {
+                ok: false,
+                logs: [],
+                error: { name: 'PolicyError', message: policy.errors.join('; ') },
+                durationMs: Date.now() - started,
+            };
+        }
+        // dynamic import — keeps the optional dep optional at runtime.
+        const ivm = await loadIvm();
+        const isolate = new ivm.Isolate({ memoryLimit: opts.memoryMb ?? 64 });
+        const context = await isolate.createContext();
+        const jail = context.global;
+        await jail.set('global', jail.derefInto());
+        const logs = [];
+        // host-side log sink
+        await context.evalClosure(`globalThis.console = { log: (...a) => $0.applyIgnored(undefined, [a.map(String).join(' ')]),
+                              error: (...a) => $0.applyIgnored(undefined, [a.map(String).join(' ')]),
+                              warn: (...a) => $0.applyIgnored(undefined, [a.map(String).join(' ')]),
+                              info: (...a) => $0.applyIgnored(undefined, [a.map(String).join(' ')]) };`, [(line) => logs.push(String(line))], { arguments: { reference: true } });
+        // RPC bridge — pass the host function directly; `arguments: { reference: true }`
+        // auto-wraps each argument as a Reference inside the isolate.
+        const hostRpc = async (binding, path, args) => {
+            const result = await rpc.dispatch({ binding, path, args });
+            return new ivm.ExternalCopy(result).copyInto();
+        };
+        // Safe to interpolate: binding names are pre-validated as JS identifiers by
+        // getSources() (src/sdk/sources/index.ts). Do NOT interpolate unvalidated strings here.
+        const namesLiteral = JSON.stringify(opts.bindings ?? []);
+        await context.evalClosure(`function makeProxy(binding, rpc) {
+         const handler = (path) => new Proxy(function(){}, {
+           get(_, key) { return handler([...path, String(key)]); },
+           apply(_, __, args) {
+             return rpc.apply(
+               undefined,
+               [binding, path, args],
+               { arguments: { copy: true }, result: { promise: true, copy: true } },
+             ).then(r => {
+               if (!r.ok) { const e = new Error(r.error.message); e.name = r.error.name; throw e; }
+               return r.value;
+             });
+           },
+         });
+         return handler([]);
+       }
+       for (const name of ${namesLiteral}) { globalThis[name] = makeProxy(name, $0); }`, [hostRpc], { arguments: { reference: true } });
+        try {
+            const wrapped = `(async () => { ${opts.code}\n })()`;
+            const script = await isolate.compileScript(wrapped);
+            const result = await script.run(context, {
+                timeout: opts.timeoutMs ?? 15_000,
+                promise: true,
+                copy: true,
+            });
+            return { ok: true, value: result, logs, durationMs: Date.now() - started };
+        }
+        catch (err) {
+            const e = err;
+            return {
+                ok: false,
+                logs,
+                error: { name: e.name ?? 'Error', message: e.message ?? String(err), stack: e.stack },
+                durationMs: Date.now() - started,
+            };
+        }
+        finally {
+            try {
+                context.release();
+                isolate.dispose();
+            }
+            catch { /* ignore */ }
+        }
+    }
+}
+//# sourceMappingURL=isolate.js.map